AWS securityhub documentation change
Summary
Updated references from 'Security Hub administrator account' to 'Security Hub Cloud Security Posture Management (CSPM) administrator account' throughout the document, including console and CLI instructions
Security assessment
The change adds references to Cloud Security Posture Management (CSPM), which is a security feature, but there's no evidence of addressing a specific vulnerability or incident. The modifications appear to clarify administrator roles and terminology related to security posture management.
Diff
diff --git a/securityhub/latest/userguide/disassociate-policy.md b/securityhub/latest/userguide/disassociate-policy.md index b0ecbd797..1ebf88295 100644 --- a//securityhub/latest/userguide/disassociate-policy.md +++ b//securityhub/latest/userguide/disassociate-policy.md @@ -3 +3 @@ -[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[User Guide](what-is-securityhub.html) +[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[ User Guide ](what-is-security-hub-adv.html) @@ -7 +7 @@ -From the delegated AWS Security Hub administrator account, you can disassociate a configuration policy or self-managed configuration from an account, OU, or root. Disassociation retains the policy for future use, but removes existing associations from specific accounts, OUs, or the root.You can disassociate only a directly applied configuration, not an inherited configuration. To change an inherited configuration, you can apply a configuration policy or self-managed behavior to the affected account or OU. You can also apply a new configuration policy, which includes your desired modifications, to the closest parent. +From the delegated AWS Security Hub Cloud Security Posture Management (CSPM) administrator account, you can disassociate a configuration policy or self-managed configuration from an account, OU, or root. Disassociation retains the policy for future use, but removes existing associations from specific accounts, OUs, or the root.You can disassociate only a directly applied configuration, not an inherited configuration. To change an inherited configuration, you can apply a configuration policy or self-managed behavior to the affected account or OU. You can also apply a new configuration policy, which includes your desired modifications, to the closest parent. @@ -18 +18 @@ Console - 1. Open the AWS Security Hub console at [https://console.aws.amazon.com/securityhub/](https://console.aws.amazon.com/securityhub/). + 1. Open the AWS Security Hub Cloud Security Posture Management (CSPM) console at [https://console.aws.amazon.com/securityhub/](https://console.aws.amazon.com/securityhub/). @@ -20 +20 @@ Console -Sign in using the credentials of the delegated Security Hub administrator account in the home Region. +Sign in using the credentials of the delegated Security Hub CSPM administrator account in the home Region. @@ -38 +38 @@ API - 1. Invoke the [StartConfigurationPolicyDisassociation](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_StartConfigurationPolicyDisassociation.html) API from the Security Hub delegated administrator account in the home Region. + 1. Invoke the [StartConfigurationPolicyDisassociation](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_StartConfigurationPolicyDisassociation.html) API from the Security Hub CSPM delegated administrator account in the home Region. @@ -61 +61 @@ AWS CLI - 1. Run the [start-configuration-policy-disassociation](https://docs.aws.amazon.com/cli/latest/reference/securityhub/start-configuration-policy-disassociation.html) command from the Security Hub delegated administrator account in the home Region. + 1. Run the [start-configuration-policy-disassociation](https://docs.aws.amazon.com/cli/latest/reference/securityhub/start-configuration-policy-disassociation.html) command from the Security Hub CSPM delegated administrator account in the home Region.